JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

安全研究人员观察到Mistic与ModeloRAT（一种基于Python的远程访问木马）协同运作，后者与代号Woodgnat（公开名KongTuke）的金融动机黑客组织存在关联。 隐蔽性极强的内存驻留后门 自2026年4月起，一种名为Mistic的新型Windows后门程序在企业网络中悄然扩散。该恶意软件通过完全在内存中执行载荷的方式实现持久化访问，不向硬盘写入任何恶意文件，使得传统依赖磁盘文件扫 ...

Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North Korean threat cluster known as Contagious Interview (aka Famous Chollima, ...

The goal in this project is to provide a simple Unix-like terminal on iOS. It uses ios_system for command interpretation, and includes all commands from the ios_system ecosystem (nslookup, whois, ...

macOS-style Hot Corners for Windows. Move your cursor into any corner of your screen, hold it for a moment, and your favorite action fires. Open Task View, Show Desktop, switch virtual desktops, lock ...

MCP Server（Model Context Protocol 服务器）是让 AI 模型调用外部工具与数据的标准化接口，由 Anthropic 于 2024 年底开源后迅速成为行业标准。截至 2026 年 4 月，Python SDK 在 PyPI 的月下载量已突破 1.64 亿次，公开目录收录的 MCP 服务器超过 20,000 个，OpenAI、Google、Microsoft 相继采纳同 ...